Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4cHFrrsaHcdo8VSDrqp-qrNrZeg.roa
File: 4cHFrrsaHcdo8VSDrqp-qrNrZeg.roa (raw, json)
Hash identifier: jTLQiXcDaLxQPf5sBUZvhPekSiKZwmquZILF985fCRI=
Subject key identifier: E1:C1:C5:AE:BB:1A:1D:C7:68:F1:54:83:AE:AA:7E:AA:B3:6B:65:E8
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028FF80186216F1B3EAE429FB84191
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4cHFrrsaHcdo8VSDrqp-qrNrZeg.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213145
IP address blocks: 31.155.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8f:f8:01:86:21:6f:1b:3e:ae:42:9f:b8:41:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1c1c5aebb1a1dc768f15483aeaa7eaab36b65e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c1:2b:df:fa:57:e4:48:fb:5e:b4:02:25:4d:
f2:15:98:6f:0b:e2:6d:b4:0e:fb:6f:0a:06:66:65:
1e:d0:98:c9:c7:2a:4c:ef:6c:fb:78:85:1f:8d:6b:
24:03:83:8a:e2:43:4a:9e:b0:8e:31:ad:a1:4b:94:
b6:f2:00:44:cf:62:e5:d0:a2:5a:3c:2f:68:5b:de:
50:b4:31:f7:b2:a0:05:aa:ee:a0:ce:7b:d4:c3:7c:
81:5c:ef:53:03:a6:26:bc:5a:a1:e0:11:68:51:f8:
39:a2:b5:56:05:bf:f2:20:19:f3:52:59:e3:7f:34:
90:a5:09:1f:be:a5:8b:f4:fe:85:cb:25:2f:f4:f5:
36:be:28:bb:8a:e9:b6:f9:06:dd:82:45:b1:f0:42:
3f:9b:1e:0b:24:c3:6b:aa:49:3d:b4:d3:6f:0d:90:
62:30:6f:3f:ee:72:bf:ab:80:0b:aa:bf:e1:bc:da:
eb:a3:26:98:0f:c3:c6:4b:7f:c0:ec:71:1a:1a:35:
a3:22:45:eb:4d:31:f6:b5:2e:40:f8:29:11:01:83:
a7:98:07:e2:be:45:30:d7:1c:26:53:14:50:8a:95:
33:9b:cd:14:e5:35:8d:76:66:fc:1f:37:25:0e:75:
3e:3f:5a:d7:0b:a1:a4:28:38:2c:fc:f4:28:21:90:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C1:C5:AE:BB:1A:1D:C7:68:F1:54:83:AE:AA:7E:AA:B3:6B:65:E8
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/4cHFrrsaHcdo8VSDrqp-qrNrZeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.155.7.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0d:fa:42:f4:24:bd:b5:81:79:08:f6:7d:b8:05:ce:1e:75:
97:57:1b:fc:8e:86:8a:d3:1a:33:bf:2d:e0:73:0b:df:36:01:
d5:1d:d2:c3:8b:0a:b3:f0:74:1d:23:5e:eb:06:a5:c8:ba:36:
ef:81:e7:49:44:4b:47:65:25:f4:f2:8f:92:64:47:1c:97:4f:
62:6d:3a:21:19:60:14:3a:b1:2a:02:1a:f9:46:b9:4e:53:54:
73:67:d3:c0:08:89:ef:d3:e6:a5:5c:07:81:76:f6:00:cb:52:
65:58:86:33:a1:d0:b7:f7:6b:cf:29:65:26:ec:4b:5d:6b:8c:
91:0e:52:33:1a:3e:23:92:74:6a:3c:cb:76:0e:12:d8:4f:33:
1a:28:7a:2d:18:75:69:63:af:b1:56:8b:8b:3a:b7:52:06:c8:
aa:af:17:52:13:67:e2:94:5e:63:f1:3c:26:df:9f:81:20:ad:
63:40:91:cc:bc:2c:26:7c:13:38:4e:ae:d1:40:39:e4:8a:92:
3c:0a:ba:6a:2b:e3:5c:64:1b:c5:4a:4c:df:be:c2:be:40:6c:
fd:2e:68:a5:e3:f2:25:9a:3c:ea:bf:a0:bf:42:96:27:39:dc:
6b:7e:71:0c:1a:8a:7c:c7:14:19:ab:53:05:8b:03:d3:31:14:
14:5e:04:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org